CVE-2022-23806 - CERT CVE
ID CVE-2022-23806
Sažetak Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.
Reference
CVSS
Base: 6.4
Impact: 4.9
Exploitability:10.0
Pristup
VektorSloženostAutentikacija
NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE PARTIAL PARTIAL
CVSS vektor AV:N/AC:L/Au:N/C:N/I:P/A:P
Zadnje važnije ažuriranje 20-04-2023 - 00:15
Objavljeno 11-02-2022 - 01:15